CVE-2008-2178

概要

参考情報

• lifetype.net/post/2008/05/04/lifetype-1.2.8-released · Patch
• secunia.com/advisories/30075 · Patch
• securityreason.com/securityalert/3871
• wiki.lifetype.net/index.php/Release_notes_Lifetype_1.2.8 · Patch
• securityfocus.com/archive/1/491550/100/0/threaded
• securityfocus.com/archive/1/491597/100/0/threaded
• securityfocus.com/bid/29017 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/42151

lifetype のその他の脆弱性

• CVE-2011-3751中 5.0LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation …
• CVE-2008-2196中 4.3Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2007-0979中 5.0Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file …
• CVE-2006-6112中 5.0LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote …
• CVE-2006-3577高 7.5SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands via the Date parameter …